Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/3139302e38332e31312e302f32342d3332203d3e20323639393236.roa
File:                     3139302e38332e31312e302f32342d3332203d3e20323639393236.roa (raw, json)
Hash identifier:          z8iZcukzxvSkgvzq6egLUaTU+8yHPykJenng2/6oz9c=
Subject key identifier:   4A:53:D4:A9:F0:55:57:FF:87:C8:2F:45:E4:9D:4B:67:6E:93:93:D7
Certificate issuer:       /CN=28CCEC43A92B4BCC9B792D757C716F93C5133B6F
Certificate serial:       0BB7ABEFAB694CF43FFB80855044A40C9650B7D0
Authority key identifier: 28:CC:EC:43:A9:2B:4B:CC:9B:79:2D:75:7C:71:6F:93:C5:13:3B:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/3139302e38332e31312e302f32342d3332203d3e20323639393236.roa
Signing time:             Tue 04 Feb 2025 18:29:26 +0000
ROA not before:           Tue 04 Feb 2025 18:24:26 +0000
ROA not after:            Tue 03 Feb 2026 18:29:26 +0000
asID:                     269926
IP address blocks:        190.83.11.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b7:ab:ef:ab:69:4c:f4:3f:fb:80:85:50:44:a4:0c:96:50:b7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28CCEC43A92B4BCC9B792D757C716F93C5133B6F
        Validity
            Not Before: Feb  4 18:24:26 2025 GMT
            Not After : Feb  3 18:29:26 2026 GMT
        Subject: CN=4A53D4A9F05557FF87C82F45E49D4B676E9393D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5c:6b:ce:ac:de:1e:46:b3:4f:f7:d2:24:9d:
                    20:46:9c:c7:c3:72:e6:cd:bd:dc:15:3f:b8:dd:03:
                    59:3f:37:20:ce:44:3e:a7:dc:ec:d6:70:f8:34:24:
                    9d:29:bc:fa:46:ac:1b:78:8b:99:94:0b:03:93:c1:
                    18:a7:e9:ca:28:7f:d4:09:54:fe:84:fb:83:56:4f:
                    e8:5c:ef:91:57:35:69:3d:ec:70:41:cc:7a:13:79:
                    d2:06:ca:08:3c:26:14:ea:a5:af:30:a4:b6:3a:68:
                    d2:f7:9e:50:f6:01:97:80:e2:49:43:4a:97:17:6a:
                    42:71:67:58:64:4d:92:7b:fa:4c:6b:d5:db:bc:82:
                    7f:dd:13:8e:a1:a4:3f:63:58:11:4e:d7:9b:27:02:
                    8e:5f:23:43:75:ac:6c:db:11:4a:40:09:e8:f4:b8:
                    85:76:4c:29:3a:db:3d:fc:0e:f3:14:4a:f0:49:aa:
                    eb:7b:f4:62:fd:b4:08:37:12:a4:3a:22:80:8d:d4:
                    f3:a3:a1:aa:d7:26:1c:eb:1c:14:9e:03:43:8e:10:
                    2e:b9:1e:c4:53:7b:8a:21:54:23:39:27:14:65:67:
                    41:dd:71:fe:4c:ac:5f:49:ee:ce:e9:5a:1b:6b:fd:
                    88:3b:f5:0c:66:4c:e7:29:63:26:fc:c4:41:15:8f:
                    a6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:53:D4:A9:F0:55:57:FF:87:C8:2F:45:E4:9D:4B:67:6E:93:93:D7
            X509v3 Authority Key Identifier:
                keyid:28:CC:EC:43:A9:2B:4B:CC:9B:79:2D:75:7C:71:6F:93:C5:13:3B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/3139302e38332e31312e302f32342d3332203d3e20323639393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:43:5a:44:70:66:26:49:a1:49:69:18:20:fb:06:9a:01:e8:
         b9:83:91:ff:6a:de:f2:3f:27:a4:6c:1c:dd:fd:7d:00:e6:b8:
         fc:d0:79:30:86:23:d1:4b:00:69:c4:2a:6b:44:05:2c:72:d4:
         b1:85:31:c0:8d:5d:72:cc:93:c6:a1:33:23:dd:25:a6:86:89:
         77:e9:30:3d:bf:24:be:d1:58:37:2a:40:00:29:b0:38:e9:4b:
         7f:bd:bf:02:81:26:eb:91:f3:26:88:11:24:a7:01:73:05:86:
         17:d8:24:81:88:08:5b:32:1e:cb:6c:cc:f6:7a:3d:67:93:c9:
         03:ca:5e:24:f7:8b:cc:28:65:46:24:92:e8:cf:e6:04:5c:c6:
         c8:b6:06:6b:13:ee:0a:ea:11:16:9b:80:e3:7f:c9:ce:1c:71:
         bc:81:5a:0e:2c:e6:40:25:11:e1:07:1b:fd:35:99:d5:0f:65:
         4b:c8:4d:f1:8a:84:ff:1c:aa:18:c0:39:bd:f1:e2:39:3d:f8:
         58:56:87:f6:bd:c1:72:1c:32:b7:78:f4:c1:16:e5:b7:a9:cf:
         d5:2c:64:0a:b8:90:bf:80:17:93:7d:fe:00:7a:d6:aa:1f:b4:
         b5:17:46:6f:b2:75:69:8d:0d:5c:bf:47:bf:49:0b:27:fb:25:
         e8:ff:83:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:26:09 2025 by rpki-client